Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File:                     bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier:          1e+WdouYGYrd/JR76cB6X8EFRg8lpboCaXOZpizFMe8=
Subject key identifier:   20:B8:05:A3:42:BE:AE:E1:3E:AD:15:6B:96:81:84:3C:DD:DE:9F:98
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       052B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number:          0521
Signing time:             Sat 04 Apr 2026 23:23:34 +0000
Manifest this update:     Sat 04 Apr 2026 23:23:33 +0000
Manifest next update:     Sat 11 Apr 2026 23:23:33 +0000
Files and hashes:         1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: Un29sXHzOvlQrd3WiAPTnOl1dDVp4B+9C/BcnClPghE=)
                          2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: 6tY3MA89EpAe/lRiSjB8kjlvtBFDcIlws9T/uGuzWKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: Apr  4 23:23:33 2026 GMT
            Not After : Apr 11 23:23:33 2026 GMT
        Subject: CN=69d19d76-f874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:2e:b6:88:f2:52:85:06:08:d3:cc:49:32:
                    cf:d8:f8:f9:0a:2d:0f:34:b7:67:b5:68:2c:0b:31:
                    47:06:31:20:26:ff:e3:d4:24:b6:8e:17:48:2e:12:
                    4d:a0:d6:9f:1e:9d:26:af:af:46:41:e2:30:bf:5c:
                    c2:15:87:93:a2:5b:47:9e:16:0b:d8:b8:e9:9f:31:
                    0b:1f:d1:d3:af:f8:55:fd:82:de:f1:c8:6c:a3:c2:
                    62:06:48:ef:f8:95:73:4f:1d:cb:ca:02:c4:45:be:
                    a8:4a:ec:13:b2:da:23:f9:89:16:0e:fb:59:e7:23:
                    89:82:c8:50:5b:f8:11:7d:a2:92:05:57:ed:99:c9:
                    64:ed:37:05:bf:05:03:d3:3c:14:ab:4f:ce:be:db:
                    a7:c6:e0:df:a8:d7:0d:91:36:94:a5:7e:14:29:b5:
                    f2:68:4b:f8:b5:7e:93:48:4a:46:17:11:89:53:37:
                    37:7c:c0:43:8a:58:c2:16:ef:7b:0f:f6:4a:3c:50:
                    79:1c:c6:c7:ea:fc:b9:b6:01:04:ca:f2:83:9a:b2:
                    56:c2:d4:2d:6f:6e:9e:11:e8:af:9f:de:b3:d8:24:
                    6f:a1:00:ba:1c:12:10:0f:c6:78:2b:66:46:b8:0b:
                    3b:5c:bc:7a:ac:53:c4:ac:f3:fb:8f:f7:e7:c9:d8:
                    be:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B8:05:A3:42:BE:AE:E1:3E:AD:15:6B:96:81:84:3C:DD:DE:9F:98
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:da:3b:29:b6:ff:97:e0:59:9c:ef:02:b5:74:43:2f:46:10:
         1c:a5:ea:23:cd:10:ee:ac:dd:ea:e3:7c:98:2a:4c:c1:e5:04:
         72:6b:b8:86:9b:43:f4:22:cb:b7:0a:9e:8a:fb:66:42:56:b6:
         bd:49:55:19:c9:3a:dc:29:90:b0:aa:9f:19:06:5c:d6:db:1d:
         4d:13:46:81:33:6c:78:28:ad:f5:5f:78:d8:b4:d7:55:4e:d3:
         ba:84:fa:5c:e3:93:54:0e:7c:ed:c6:43:63:aa:e0:e7:ab:a0:
         77:6f:fb:37:e7:78:e7:bf:3e:47:5d:ad:96:2c:f8:6f:bd:3a:
         d5:8a:a7:3a:1e:c9:7d:9d:57:eb:be:1e:e4:62:91:59:b2:a4:
         ca:84:75:f1:61:08:73:d4:e9:77:96:48:f5:a7:93:74:31:7a:
         88:ad:66:fc:b6:7f:c7:36:77:71:22:0f:f2:4d:c0:52:e8:87:
         5e:22:a2:02:15:3d:21:79:31:25:1a:94:30:64:29:fb:da:da:
         e4:b5:b5:ce:8d:16:28:ae:93:fa:40:86:3f:be:d4:f4:cb:b9:
         90:b8:ac:13:bd:2b:59:94:85:04:0f:01:10:ea:b2:9a:d8:4c:
         89:e8:42:33:75:74:cf:ed:e6:da:4a:66:99:9a:c1:be:45:02:
         43:54:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:06 2026 by rpki-client